In the previous examples, we have seen what is meant by social engineering, we have discussed how
social engineering is harmful these days and how people can be easily tricked into revealing the credentials.
And we also discuss different types of social engineering attacks back in this lecture.
We'll see how to install a browser exploitation framework in Cali.
That is the beef framework, which is a framework which is used to carry out most of the attacks.
And we'll also see how to use a beef in carrying out social engineering attacks.
So let us get started with installing beef.
So let us start installing beef, as you can see among my browser.
Michael Machine, I'm sorry, and the first thing that you need to do is you have to go and create a
folder.
So I will create a folder in my home and I just create a new folder and college applications where I
will install all the future applications.
Now, make sure you install all the software or anything you download from it or any browser, any link.
Make sure you install the new software into one particular folder.
So now install the terminal and let's dive in to applications.
Beef is a good framework, which is not only used for social engineering, but it can also be used for
exercise attacks.
So now let's go to Firefox.
In Firefox, go to w w w dot Google dot com.
And their type beef.
Framework for get all you can, just maybe get the first link from GitHub, that is the beef project,
copy the link.
And now you can see if you want to read anything, this is all the beef packages.
So, yes, this is all about beef.
You can read about beef beef allows the provision been driven tester to assess the actual security posture
of a target environment by using blindside attacks.
So basically it uses many of attacks and this is the simple step which is used.
So now let's go to terminal.
And there you have a type pseudo get blown and have to piece the link, and I don't get into the password
freckly machine and it will start downloading beef, will wait till this download get started and install.
So now beef has been successfully downloaded in the applications folder, after everything else, I
can see the beef Boulder and I will go into the beef folder.
So if you can see there is one file Kollars install and you have to execute that file.
So you can see the install, yes, right there now press the install that is install.
And then hit enter, this is the framework, so are you sure you wish to continue?
Yes, I wish to continue.
So hit enter the default value is why you can either press one or press enter now it is downloading
beef and will wait till for the install the beef packages.
It's not about just inserting the packages.
There are some configurations that need to be made.
So make sure you watch this video till the end.
Now, beef has been successfully installed.
If the new command doesn't happen again, installed by running the pseudo dash install, if you get
an error in between, please install by typing pseudo slash install.
You can see the message installed completely successfully runby to launch.
But before that, we have to make some changes.
So now we will just have to change the default password in the configuration, not Whydah A.M..
Fine, so let us try running the beef.
Let's see what we get as output.
So you have to install beef, but having pseudo dot beef, I'm sorry, pseudo dot slash beef.
So let us wait till beef starts, it will take some time.
So be patient.
So there's an error before username and password is in use, please, Jeanne De-brief couldn't.
So let us now go to the files where we have downloaded the beef and let us find the file config by Ayman.
Just type alerts to get those files present in the beef and you can see there's a file config that why
Amole do not go with the Donaldsonville, which I underscore, just go to the first file.
So pseudo nonno configured via e-mail and then hereinto it will load the file.
And there you go.
You can see the credentials, user and password.
You can change the username and password nembhard.
Make sure you do not keep the default username.
That is the beef and beef.
I will keep the username same as the damn one rybolovlev application that is admin and password.
Then click control or press enter and then again press control.
Extract the divide.
Now, let us try by launching the beef again.
Yes, Kopassus has been successfully changed now, it shouldn't show any error.
Let us see again by hitting pseudo guards, slash beef command sonographer types would assume that is
now we are telling beef that the super user who are using who's using the beef.
And then they slash beef and hit into.
It will take some time to initialised because we are running beef for the first time.
So that for a few seconds before still loading.
There you go.
We have got something we have got the running network interface, that is one seven point zero point
one you warrell and we have also got the hook.
You are.
Is the interface and the worried?
Yes, so what we have to go the you that is a user interface, we have to copy that.
Make sure you copy the address, which belongs to the Ugali machine and just based it there and then
hit Enter.
There you go.
We have successfully installed the before you get username and password, the username is admin, password
is password and then click login.
It will launch the B framework.
There you go.
So we have successfully installed the B framework and you can also visit the site to read more about
it.
You can see on GitHub basically because of browser exploitation Clydeside framework, so it will mostly
execute the plan attacks.
In the next lecture, we will see how to use beef to hook up a browser and how to perform social engineering
attacks on beef.
So this is all we've log's zombies, though, you'll explore all of these, the online browser tab,
the offline browser tabs, everything we'll explore in the next list.
So let us get started with the next list.
If you have any problems, please feel free to ask us.
So in this lecture, we saw how to install the browser exploitation framework, reconfigured to be a
framework to carry out different attacks.
So in the next lecture, be ready with the framework to carry out the social engineering attacks.
Let us see how hackers use this framework to trick people into revealing their credentials.